WHAT IS CLAIMED IS: 



1. For use in a system-on-a-chip (SoC) having a secure 

2 execution environment (SEE) containing secure memory, a 

3 cryptographic accelerator, comprising: 

4 a key register located within said SEE and coupled to said 

5 secure memory to receive a cryptographic key therefrom; and 

6 data input and output registers located outside of said SEE 

7 and coupled to said key register to allow said cryptographic key to 

8 be applied to input data arriving via said data input register to 

9 yield output data via said data output register. 

2. The cryptographic accelerator as recited in Claim 1 

2 wherein a secure data bus coupling said key register and said 

3 secure memory is isolated from external pins of said SoC. 

3. The cryptographic accelerator as recited in Claim 1 

2 wherein a cryptographic block coupled to said key register and said 

3 data input and output registers is selected from the group 

4 consisting of: 

5 a Data Encryption Standard (DES) block, and 

6 a triple Data Encryption Standard (3DES) block. 
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4. The cryptographic accelerator as recited in Claim 1 

2 wherein said key register is a write-only register and writeable 

3 only when a central processing unit of said SoC is in a secure 

4 state. 

5- The cryptographic accelerator as recited in Claim 1 

2 wherein a data bus coupled to said input and output registers is 

3 further coupled to external pins of said SoC, 

6. The cryptographic accelerator as recited in Claim 1 

2 wherein a central processing unit mediates movement of said input 

3 data and said output data between said input and output registers 

4 and memory external to said SoC. 

7. The cryptographic accelerator as recited in Claim 1 

2 wherein said secure memory comprises secure read-only memory and 

3 secure static random-access memory. 
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8. A method of performing cryptography in a system-on-a-chip 

2 (SoC) having a secure execution environment (SEE) containing secure 

3 memory, comprising: 

4 loading a key register located within said SEE with a 

5 cryptographic key from said secure memory, said key register 

6 forming a part of a cryptographic accelerator; and 

7 applying said cryptographic key to input data arriving via a 

8 data input register to yield output data via a data output 

9 register, said data input and output registers located outside of 
10 said SEE. 

9. The method as recited in Claim 8 wherein a secure data 

2 bus coupling said key register and said secure memory is isolated 

3 from external pins of said SoC. 

10. The method as recited in Claim 8 wherein said applying is 

2 carried out in a cryptographic block coupled to said key register 

3 and said data input and output registers, said cryptographic block 

4 selected from the group consisting of: 

5 a Data Encryption Standard (DES) block, and 

6 a triple Data Encryption Standard (3DES) block. 
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11. The method as recited in Claim 8 wherein said key 

2 register is a write-only register and writeable only when a central 

3 processing unit of said SoC is in a secure state. 

12. The method as recited in Claim 8 wherein a data bus 

2 coupled to said input and output registers is further coupled to 

3 external pins of said SoC. 

13. The method as recited in Claim 8 further comprising 

2 mediating movement of said input data and said output data between 

3 said input and output registers and memory external to said SoC 

4 with a central processing unit. 

14. The method as recited in Claim 8 wherein said secure 

2 memory comprises secure read-only memory and secure static random- 

3 access memory. 
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15. A system-on-a-chip (SoC), comprising: 

2 a central processing unit; 

3 a secure memory coupled to said central processing unit (CPU) 

4 and including: 

5 secure read-only memory (ROM) , and 

6 secure static random-access memory (SRAM) , said CPU and 

7 said secure memory configured to provide a secure execution 

8 environment (SEE); and 

9 a cryptographic accelerator, including: 

10 a key register located within said SEE and coupled to 

11 said secure memory to receive a cryptographic key therefrom, 

12 and 

13 data input and output registers located outside of said 

14 SEE and coupled to said key register to allow said 

15 cryptographic key to be applied to input data arriving via 

16 said data input register to yield output data via said data 

17 output register. 

16. The SoC as recited in Claim 15 wherein a secure data bus 

2 coupling said key register and said secure memory is isolated from 

3 external pins of said SoC. 
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17. The SoC as recited in Claim 15 wherein a cryptographic 

2 block coupled to said key register and said data input and output 

3 registers is selected from the group consisting of: 

4 a Data Encryption Standard (DES) block, and 

5 a triple Data Encryption Standard (3DES) block. 

18. The SoC as recited in Claim 15 wherein said key register 

2 is a write-only register and writeable only when said CPU is in a 

3 secure state. 

19. The SoC as recited in Claim 15 wherein a data bus coupled 

2 to said input and output registers is further coupled to external 

3 pins of said SoC. 

20. The SoC as recited in Claim 15 wherein said CPU mediates 

2 movement of said input data and said output data between said input 

3 and output registers and memory external to said SoC. 
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